If your web browser is constantly being redirected to sites that display a “Your Mac Has Been Blocked”notification, asking you to call a support number to fix it, then it is possible that you have an potentially unwanted application installed on your device.

These “Your Mac Has Been Blocked” alerts are nothing more a scam. Apple does not send unsolicited email messages or make unsolicited phone calls to request personal or financial information or fix your computer. Treat all unsolicited phone calls or pop-ups with skepticism. Do not provide any personal information.



The bogus “Your Mac Has Been Blocked” alert is shown in such a way as to trick the user into thinking their computer has crashed or that a virus has been detected on the computer. It does this to try and scare the infected user into calling one of the listed numbers in order to receive support. In reality, though, they will only be greeted with people who are trying to sell them unneeded support contracts and services.
The “Your Mac Has Been Blocked” pop-up will have this message:

ERROR # 268D3
Please call Apple Support immediately at: (phone number)
Do not ignore this critical alert.
If you close this page, your network access will be disabled to prevent further damage to our network.
Your computer has alerted us that it has been infected with some virus and spyware. The following information has been stolen…
> Facebook Login
> Credit Card Details
> Photos stored on this computer
You must contact us immediately so that our engineers can walk you through the removal process over the phone. Please call us within the next 5 minutes to prevent your computer from being disabled.

The scammer will typically attempt to get the victim to allow remote access to their computer. After remote access is gained, the scammer relies on confidence tricks typically involving utilities built into Windows and other software in order to gain the victim’s trust to pay for the supposed “support” services, when the scammer actually steals the victim’s credit card account information.
You should not purchase anything from numbers listed in these “Your Mac Has Been Blocked” alerts. Whatever you do, please do not call the phone number for support because it is not Apple’s but rather a group of scammers waiting to rob you of hundreds of dollars under false pretenses.

How to remove Your Mac Has Been Blocked Adware from Apple Mac OS (Guide)

This malware removal guide may appear overwhelming due to the amount of the steps and numerous programs that are being used. We have only written it this way to provide clear, detailed, and easy to understand instructions that anyone can use to remove malware for free.
Please perform all the steps in the correct order. If you have any questions or doubt at any point, STOP and ask for our assistance.

• STEP 1: Uninstall the malicious apps from macOS
• STEP 2: Remove the unwanted extensions from your Web Browser

This step is needed if the malicious “Your Mac Has Been Blocked”  pop-ups will not allow you to close your browser.

1. Press Command + Option + Escape simultaneously. This will open the open the Force Quit Applications window.

Select Safari, Chrome, Firefox or any other browser in which your are seeing the Tech Support Scam – Call for Support ransomware notification.



Click the button that says “Force Quit“. This will forcefully end your browser program, thus removing the Tech Support Scam – Call for Support browser hijacker.



If you cannot switch from the unresponsive app, press Command + Option + Shift + Esc for three secondsto force it to quit. This key combination tells macOS to force quit the frontmost app.Alternatively, if you are using Safari or any other browser, you can disconnect your Internet, then open the web browser, navigate from the malicious web page, then reconnect to the Internet.

STEP 1: Uninstall the malicious apps from macOS

In this first step, we will try to identify and remove any malicious apps that might be installed on your device. The bellow video will explain how to remove unwanted apps from your macOS.

Known malicious apps: MacSaver, MacVX (and variants like MacVaX), MacCaptain, MacPriceCut, SaveOnMac, Mac Global Deals or MacDeals, MacSter, MacXcoupon, Shop Brain (or variants like SShoP Braaiin), PalMall, MacShop, MacSmart, News Ticker Remover, Shopper Helper Pro, Photo Zoom, Best YouTube Downloader, ArcadeYum, Extended protection, Video download helper, FlashFree or GoldenBoy.

STEP 2: Remove the unwanted extensions from your Web Browser

SAFARI 

From the Safari menu, select “Preferences“.


In the Safari Preferences window, click the “Extensions” tab. Find the “MyShopcoupon” plugin, then click on the “Uninstall” button.



Next, select “Preferences“, go to the “General” tab and change the “Default Search Engine” to Google. Then, in the “General” tab, find the “Home Page” and change it to “google.com”.


GOOGLE CHROME

Click on Chrome’s main menu button, represented by three horizontal lines. When the drop-down menu appears, select the option labeled Settings.



Chrome’s Settings should now be displayed in a new tab or window, depending on your configuration. Next, scroll to the bottom of the page and click on the Show advanced settings link (as seen in the below example).





Chrome’s advanced Settings should now be displayed. Scroll down until the Reset browser settingssection is visible, as shown in the example below. Next, click on the Reset browser settings button.




A confirmation dialog should now be displayed, detailing the components that will be restored to their default state should you continue on with the reset process. To complete the restoration process, click on the Reset button.


MOZILLA FIREFOX

1. In the Firefox’s address bar type: аbout:support, then click on Enter.
2. Click the “Reset Firefox” button in the upper-right corner of the “Troubleshooting Information” page.
3. To continue, click on the “Reset Firefox” button in the new confirmation window that opens.
   
4. Firefox will close itself and will revert to its default settings. When it’s done, a window will list the information that was imported. Click on the “Finish“.

News article is edited by: yakura - 26-04-2018, 16:44